KH123
1
files = fileManager.findFiles(dataSource, val2, path)
val2 = ‘%’
path = Users\(User)\AppData\Roaming\Microsoft\Windows\Recent\
I tried different paths too Users\%%\AppData\Roaming\Microsoft\Windows\Recent
and also C:\Users(User)\AppData\Roaming\Microsoft\Windows\Recent\
nthg found. Although in autopsy there is when I go to /img_PhysicalDrive0/vol_vol3/Users/(User)/AppData/Roaming/Microsoft/Windows/Recent/File.py
KH123
2
Here is image about it https://ibb.co/L15PBdR
files = fileManager.findFiles(dataSource, ‘%’,’\Users(User)\AppData\Roaming\Microsoft\Windows\Recent’)
not working.
Suggestions:
- Put a ‘%’ in front of your path or a leading slash
- Make sure you’re using forward slashes
So try “%Users/(User)/AppData/Roaming/Microsoft/Windows/Recent/” or “/Users/(User)/AppData/Roaming/Microsoft/Windows/Recent/”
KH123
4
that is true, thanks apriestman.